Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
File:                     BkapmNbNXVvutQ9MkpExVTb3xbQ.mft (raw, json)
Hash identifier:          CtrM26vJA1EPf+VtomY3one10gQ6wr2xNZ3skL6ipFA=
Subject key identifier:   23:2C:76:2F:C6:B6:D2:B8:EC:77:70:D4:AB:AB:2D:46:BE:34:85:A8
Authority key identifier: 06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4
Certificate issuer:       /CN=F36CAE5AAF/serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
Certificate serial:       07C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
Manifest number:          07C8
Signing time:             Fri 17 Apr 2026 01:56:47 +0000
Manifest this update:     Fri 17 Apr 2026 01:56:46 +0000
Manifest next update:     Sun 19 Apr 2026 01:56:46 +0000
Files and hashes:         1: BkapmNbNXVvutQ9MkpExVTb3xbQ.crl (hash: Q88nad6StNRkpleQib9/jiEwKI96gyC2fbfYKwKFw/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAE5AAF, serialNumber=0646A998D6CD5D5BEEB50F4C9291315536F7C5B4
        Validity
            Not Before: Apr 17 01:56:46 2026 GMT
            Not After : Apr 19 01:56:46 2026 GMT
        Subject: CN=69e1935e-0064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:62:e5:a4:09:86:9f:68:5f:e5:ea:ee:9a:
                    b4:ca:0e:9a:9b:24:d6:ae:51:22:ed:e8:01:2b:a2:
                    51:ae:fe:ed:86:a8:61:dd:f7:5c:83:30:52:12:cd:
                    25:47:d4:2e:62:9f:b1:52:c9:6e:b0:fa:9b:5d:49:
                    17:30:64:e5:51:1c:2f:36:f0:ec:08:c4:2c:db:52:
                    2b:32:fb:59:f2:9a:d6:a1:9a:02:6a:da:f3:ff:29:
                    85:ce:8f:a9:a9:66:0b:47:1a:df:65:74:dd:67:62:
                    df:18:05:95:ff:39:99:ad:e7:fa:64:b6:a7:e2:2d:
                    d3:b1:eb:1a:fa:1c:71:e5:32:3d:55:8e:ec:93:f4:
                    87:a8:4f:49:40:15:cd:2a:bf:eb:73:cc:69:d6:d9:
                    9d:9a:99:00:c3:ed:33:79:1a:67:cc:49:cf:41:7e:
                    b1:cf:c2:4b:02:ce:04:8f:f7:0f:ce:cb:c9:84:a9:
                    aa:73:2f:ba:84:04:32:bd:24:73:d5:f9:99:38:74:
                    80:74:63:f9:8e:75:f4:1e:22:66:a1:ab:ec:45:fc:
                    cb:0f:95:e3:bb:ab:8e:96:92:c8:27:f7:af:02:8b:
                    cb:41:22:5a:d2:db:6e:43:8f:93:67:51:65:da:ab:
                    f5:c9:a8:6b:d3:a3:4d:60:55:05:bc:53:e5:0a:ee:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:76:2F:C6:B6:D2:B8:EC:77:70:D4:AB:AB:2D:46:BE:34:85:A8
            X509v3 Authority Key Identifier:
                keyid:06:46:A9:98:D6:CD:5D:5B:EE:B5:0F:4C:92:91:31:55:36:F7:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BkapmNbNXVvutQ9MkpExVTb3xbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAE5A/92819FDE439C11EBB864D94AF8AEA228/BkapmNbNXVvutQ9MkpExVTb3xbQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:3b:cc:f1:8a:04:1e:65:ef:9a:1b:ee:0f:ff:3a:3a:dc:
         e8:11:63:92:99:15:a3:16:61:88:77:d6:13:0d:a3:d1:d5:11:
         fd:d4:c8:57:c7:21:5b:35:f2:45:37:ea:a5:46:d2:4a:b3:19:
         9b:16:c8:63:c2:47:47:41:1d:73:0a:ae:f4:d2:d4:df:68:27:
         b8:45:66:0f:26:58:13:79:7e:56:c9:c0:d5:c6:85:fc:54:de:
         d1:6f:5f:83:45:38:b1:36:ed:15:b3:31:a9:b2:24:31:54:f5:
         15:45:b9:de:5d:aa:f5:40:66:81:4c:49:02:0b:fd:22:84:9b:
         b0:84:b7:77:74:ec:6e:5a:fa:4e:d2:7f:3f:87:6e:9c:26:8b:
         70:58:36:77:bf:80:2d:02:07:c7:bf:e6:03:4c:f7:a8:8a:5b:
         d6:c7:95:16:0d:8c:94:d1:cf:45:24:0e:3d:56:f7:67:d1:a2:
         fc:69:c7:f9:32:8e:e5:5b:92:89:54:6e:e5:c2:8d:6c:c9:cc:
         3d:f0:f4:bc:6a:d1:e1:25:a5:ca:ec:6d:25:51:a1:eb:aa:64:
         c0:ba:1b:57:19:96:8b:57:ee:5e:a1:9f:27:5e:a1:a4:d7:cb:
         af:35:a1:86:29:a3:cb:c2:01:84:ed:dc:79:55:31:36:f1:e8:
         d2:c9:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:50 2026 by rpki-client